Questions tagged [privacy]

For questions about freedom from unsolicited observation, or the collection, use and distribution of private information.

Filter by
Sorted by
Tagged with
1
vote
1answer
35 views

GDPR/right of erasure and online marketplaces/payment platforms

I am in the early stages of designing an online marketplace platform for professional services. In the context of specifying what happens when a user hits the "delete account" button, I am considering ...
34
votes
2answers
5k views

How to store refusal of cookie consent

If a user refuses cookies on a website, then how can that website store that refusal? As far as I can tell, the GDPR requires you to store both consent to and refusal of personal data storage. But it ...
1
vote
1answer
110 views

Consequences of blank check on privacy policy?

Some websites intentionally hide access to privacy policies and terms & conditions they require users to agree to. For example, consider the Hotel De Anza. If you click through the steps of the ...
-2
votes
1answer
42 views

Using someone else’s photograph

Is it illegal to copy a picture of someone else, found on a public site, and use it on your own site?
-1
votes
1answer
77 views

How law can help me if someone using my name join a zoom class and tell teachers bad words?

Nowadays during lockdown Online classes are happening in the Zoom app. Teachers share the Zoom meeting link where we do our classes. As here anybody can join with any name and someone joins in zoom ...
0
votes
1answer
37 views

United States HIPAA and New Zealand HISO from outside these countries

We are developing a software product for storing and managing health records in Australia, with the software product primarily targeted towards Australian healthcare organisations. This requires us to ...
1
vote
1answer
91 views

Legality of online proctoring for exams in Australia

Is it legal for a university to force students to install an application and utilise it for online examinations when the service the university itself is using cannot guarantee our information will ...
3
votes
2answers
58 views

Are there any HIPAA like technical requirements in EU for developing health related web software?

It looks like in the USA developers adhere to HIPAA standards when developing and hosting health-related software. But I can't find anything similar to the EU. GDPR is all about being transparent and ...
2
votes
1answer
37 views

Reposting pictures of private Instagram account elsewhere

Is it illegal to post pictures from a private Instagram account on the internet? My friend has a private Instagram account but her posts were seen on a sub reddit. She didn't give consent to repost ...
1
vote
1answer
123 views

Covid tracking app, forcing citizen to install it on insecure devices

Here's the hypothetical scenario, which in some countries might not be hypothetical after all: The app. Because of Covid-19, the government decides that some citizens must install an app on their ...
1
vote
1answer
81 views

How can it be legal in the USA to have live television shows/streams of cops interacting with real people? [duplicate]

I always found even the concept of cops having "bodycams" extremely scary and creepy, but having people watch it all live, as a freaking television show or "YouTube stream" or whatever, is even worse. ...
7
votes
2answers
11k views

What legal protections exist against doxxing in the UK

Doxxing is the unfortunately growing phenomenon of having your personal data posted on public web sites, or even in commercial media (newspapers, TV/radio etc.) What, if any, laws does this break in ...
-2
votes
0answers
70 views

Neighbor is violating laws by stalking, discriminating us, invasion of privacy,harassment, manager only writes us up. We aren't allowed to live.Help

Our neighbor has called the cops several times, we never got written up in fact the cop secretly listened to see if we were being noisy and he said he couldn't hear a peep. She told the cops she is ...
2
votes
1answer
135 views

Dual Consent Laws of California Relating To Residents Of Other State's

CA Penal Code 632 sets forth that all parties must be notified that a conversation is to be recorded. I have a person whom I'd like to assist in a proceeding, possibly, given the situation is ...
7
votes
2answers
1k views

Do family pictures and videos in public places fall under GDPR?

The Czech Data Protection Authority fined Mr. Rynes for filming members of the public without their consent. Mr. Rynes appealed, arguing that he was covered by the personal and household ...
-1
votes
0answers
13 views

Can I Collect Information About Children Under 13 If It Is Given By A Parent?

I am making a location sharing app, and one of its features is being able to represent someone who doesn't have a phone. It will basically assume the person with no phone (such as a child) is right ...
1
vote
2answers
49 views

Does California's Information Practices Act (IPA) of 1977 apply to individuals after death?

I'm in the midst of researching a person who was born in 1892 and died in 1969 in California. The subject has no living heirs. I've requested documents from the California Department of Consumers ...
0
votes
1answer
31 views

Is it illegal for a leasing agent to share previous tenants direct debit form?

I am a tenant of a residential property in Victoria Australia. I requested my rental ledger and direct debit form to apply for a new property. My rental agent has (accidentally???) sent me the direct ...
1
vote
0answers
53 views

It is legal for a collection company to send Emails displaying the debtor's social security number?

It is legal for a collection company to send Emails displaying the debtor's social security number? The Email states the city where the debtor lives as well.
0
votes
1answer
55 views

Can Lavabit be suspended again?

From the about page: In 2013, we suspended service to protect our global customers when the U.S. government ordered us to release our Transport Layer Security private keys. To protect your ...
0
votes
2answers
405 views

Are Steam account IDs (and telemetry data associated with Steam IDs) deemed personal data?

A few friends and were having an argument on the following situation: People can sign up for Steam accounts for free, letting them purchase games and play games over their network. Users are able to ...
2
votes
1answer
43 views

Is revision history (audit/change log) compliant with GDPR's right to rectification?

Assume, there's a model called CustomerDetails, which contains the following properties: ContactEmail - an email address for contacting purposes, ContactAddress - a postal address for contacting ...
0
votes
3answers
117 views

Can Banks legally use Encrypted Ledgers like in Private coins?

Seeing so much news about blockchains and banks I have a question that I may need your help. Taking in consideration the Bank Secrecy Act, can a Bank use a completely Encrypted Ledger? KYC is still ...
1
vote
0answers
59 views

Legality & security standards of sending SSN / Drivers License via email

I am building a website for use in the state of Ohio where users enter their last 4 digits of SSN or their Driver's License number. This data is submitted to the webserver which generates a PDF with ...
2
votes
1answer
38 views

How to interpret a Labor Condition Application (LCA) Posting Notice during the stay-at-home quarantine?

My colleague is now, like many of us, working from home due to the coronavirus. We're in NYC. She's also been applying for an H-1B though and received the following letter, which seems to say that ...
0
votes
1answer
37 views

Offering a free service (SaaS) via website as a personal individual person in Germany for everybody (global)

Want to offer a free service to scan code via my website (Software as a Service - SaaS) . It will be free for now, run as a individual in Germany to be used globally (anybody in the world). Hosted on ...
0
votes
1answer
90 views

definition of personal data collection related to privacy policy

So I am about to publish a mobile app and I need a privacy policy, although my app doesn't really collect any type of user information, is there some kind of definition about what it means to "collect"...
1
vote
1answer
176 views

Is CNN Chris Cuomo right about Clinton's emails: “it's different for the media”?

In 2016, CNN reporter Chris Cuomo, said about Hillary Clinton's hacked emails: Also interesting is remember...it's illegal to possess the stolen documents. It's different for the media. So ...
0
votes
1answer
59 views

Can I refuse to send an email to untrusted domain

If I have to discuss financial, legal or medical subjects (or anything requiring privacy, or anything really) via email, can I refuse to do so if I don't trust the domain of the email of the other ...
0
votes
2answers
37 views

GDPR - Storage and processing of student email addresses

I'm writing some software for use in a school. An essential function of the software is to email students using their school provided email account. My question is, does GDPR apply to the storage and ...
0
votes
2answers
156 views

Is there precedent of secret subpoena that compels government access?

Under what guise of law, would state actors (UK, US, etc.) be able to issue secret (unpublished) subpoenas that require industry / utilities to provide government access to their systems? Examples of ...
1
vote
2answers
87 views

Sharing confidential information between two companies

I own a small company and submitted a proposal to a major company and I received no response. Another company considered my proposal and invited me to present the proposal to the board. I was asked ...
2
votes
2answers
3k views

Can a neighbor point cameras at our backyard and the back of our house?

We live in the hills. And the way our neighborhood is designed is as you go up the hill, there will be a house below you, and a house above you (which are side by side to your property). The elevation ...
0
votes
1answer
18 views

Can RescueTime sell derived data?

Me and my friend were discussing privacy concerns regarding the use of a activity tracking application - Rescuetime. It's privacy policy says, We will never sell, rent, or otherwise share your ...
1
vote
1answer
89 views

Who is responsible for packages wrongfully delivered to one's address?

Re: a thread discussing legal obligations for a package wrongfully delivered to one's address: ...it comes down to whom it is addressed to. As long as the merchandise is addressed to you, you may ...
1
vote
1answer
130 views

Hypothetical question about Whistleblower Protection

Let's say a US non-government employment comes in contact with very sensitive unprotected information on the web. The information was gathered using opsint (Open Source Intelligence) there was no ...
1
vote
2answers
57 views

Reporting poor privacy practices in a mobile app

I found a vulnerability in a paid Smartphone app. It is supposed to contain a lot of private details. There is a logging option for support that you can switch off and on, to extract the part that ...
0
votes
2answers
40 views

How to anonymize network data packets for commercial use?

I am working on a project where I have to identify anomalies in network traffic of business networks with machine learning. The algorithm is feeded with captured network packets from inside of the ...
0
votes
0answers
63 views

Facebook vs GDPR - Is Facebook never deleting the Searches you do?

I frequently delete the Search History from my account's Activity Log. However, every time I start typing in Search, Facebook seems to remember perfectly searches I've done in the past. Suggestions ...
1
vote
1answer
65 views

What information will be made public by CRT and for how long?

I would like to bring a case to the Civil Resolution Tribunal. I would like to know more about it's privacy. From there Information Access & Privacy Policy it appears the public can access just ...
2
votes
1answer
194 views

Online Proctoring, Exams, and the GDPR?

Due to the coronavirus outbreak, my university has tentatively canceled all live forms of live education, including exams. Instead, they have decided to hold exams through an online proctoring ...
1
vote
1answer
51 views

HIPAA and Shared Medical Records

Is it against HIPAA regulations to not include records received from other clinics when a patient asks for a copy of their medical records to be sent to a new clinic? In other words, is it ok to only ...
0
votes
1answer
111 views

Is it legal to hire a Private Investigator in Korea? If not, what's the closest alternative?

I'm writing a story and I'm asking for factual accuracy in the storyline. (Not asking for suggestions in hiring an actual PI.) I know for a fact that it's now illegal in Korea to hire a Private ...
2
votes
1answer
2k views

Is it illegal to masturbate inside public toilet behind closed door out of view from the public?

I suspect someone is doing that but it is hard to catch him because it is illegal to install surveillance camera in the toilet. Putting that aside, is this act that should be done in private at home ...
1
vote
2answers
263 views

Can a family member break into my room and can I take legal actions against it?

Here is the situation. I still live with my family like my brother (we are both of legal age) . We never had a good brother relationship. We always try to avoid each other as best as we can. In the ...
1
vote
1answer
52 views

UK: Can someone record or broadcast over the phone a private conversation from outside of the room where this conversation is take a place?

By the UK law can someone record or broadcast over the phone a private or business conversation from outside of the room where this conversation is take a place?
0
votes
3answers
100 views

Some of my personal information was made public some time ago as a school project. Can I legally demand removal of said information?

Some years ago, as a group project in school, I and my group published on a certain page (REDACTED.wordpress.com) information including things like my name, email, phone number, pictures, etc. It was ...
1
vote
2answers
93 views

GDPR: What is the legal situation on documenting cases of “Right to be forgotten” claims?

I wasnt able to find an explanation inside the GDPR whether a data privacy officer (or similar responsible) is allowed or required to document cases where individuals claimed the right to be forgotten....
1
vote
1answer
60 views

Do VPN providers really operate under single jurisdiction, even though their servers are located in many different countries?

For example, ProtonVPN claims in many places (e.g. Transparency Report, Terms and Conditions, Privacy Policy) that their service operates "under Swiss law", which, among other things (based on their ...
1
vote
1answer
66 views

Data retention for EU citizens travelling between UK and EU during Brexit transition/implementation period

Context: I'm an EU citizen studying in the UK. When I travel to my home country in the EU (for example through a direct flight or by train), and then return to the UK, some of my personal information ...

1
2 3 4 5
11